← Back

Misp

misp

Vendor: Misp Project • 122 CVEs

CVEs (122)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-5720
1Misp Project
2Malware Information Sharing Platform
Misp
Jun 23, 2026
Sep 3, 2016
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware Information Sharing Platform (MISP) before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors...Show more
Multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware Information Sharing Platform (MISP) before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) add.ctp, (2) edit.ctp, and (3) ajaxification.js.Show less
CVE-2015-5719
1Misp Project
2Malware Information Sharing Platform
Misp
Jun 23, 2026
Sep 3, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors.